General
- Target 2026-04-21_811ecd7caf86ec84fb737fcb288cfb24_cobalt-strike_coinminer_elex_frostygoop_glassworm_hive_poet-rat_salatstealer_sliver_snatch
- Size 6.0MB
- Sample260421-ecmqlsbs9s
- SHA256 40242da45b8712efbdada1b523f3e3c4f0f9e1daed845b28989fa6ae43facb67
- MD5 811ecd7caf86ec84fb737fcb288cfb24
- SHA1 e933345b062583eba3768057a5f0b2634eabb156
- SHA512 0e74d423401a689575d3032391f4883ac49f1656a61a4e1a04a8e6d134785394c549621ca19063fe5958191867b83d5023c462c2f072a9403e5e42b701f39d6a
- SSDEEP 98304:K6FX1Dazsw+dIQ32KvPjVd/73KFFhUD9ly:hVax+jVd/GFXURl
- TLSH T1C2564A91F9CB40F6EA03193108AB527F17306D098F34DBC7EA547F69ECB76A20932659
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-04-21_811ecd7caf86ec84fb737fcb288cfb24_cobalt-strike_coinminer_elex_frostygoop_glassworm_hive_p.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-21_811ecd7caf86ec84fb737fcb288cfb24_cobalt-strike_coinminer_elex_frostygoop_glassworm_hive_p.exe
Resource
win11-20260130-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-21_811ecd7caf86ec84fb737fcb288cfb24_cobalt-strike_coinminer_elex_frostygoop_glassworm_hive_poet-rat_salatstealer_sliver_snatch
- Size 6.0MB
- SHA256 40242da45b8712efbdada1b523f3e3c4f0f9e1daed845b28989fa6ae43facb67
- MD5 811ecd7caf86ec84fb737fcb288cfb24
- SHA1 e933345b062583eba3768057a5f0b2634eabb156
- SHA512 0e74d423401a689575d3032391f4883ac49f1656a61a4e1a04a8e6d134785394c549621ca19063fe5958191867b83d5023c462c2f072a9403e5e42b701f39d6a
- SSDEEP 98304:K6FX1Dazsw+dIQ32KvPjVd/73KFFhUD9ly:hVax+jVd/GFXURl
- TLSH T1C2564A91F9CB40F6EA03193108AB527F17306D098F34DBC7EA547F69ECB76A20932659
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects Windows executables referencing non-Windows User-Agents
-
Suspicious use of SetThreadContext